[ SECURITY & DATA ]
Your rates and customer list are the business. We treat them that way.
CONTROLS ON FILE — 09
NDA · DPA · TLS 1.2+ · SOC 2-ALIGNED CONTROLS
[ 01 / THE CONTROLS ]
NDA BEFORE ACCESS
Mutual — ours or yours — signed before a single document changes hands.
DATA PROCESSING AGREEMENT
Signed by default, not on request.
LEAST-PRIVILEGE ACCESS
Read-only where possible. Named accounts, revocable in one click. Access log kept.
ENCRYPTION
In transit (TLS 1.2+) and at rest.
NO MODEL TRAINING
Your documents never train public AI models. Processing runs on enterprise AI APIs under commercial no-training terms.
RETENTION
On your schedule — purged post-engagement.
OPERATOR ACCESS
Per-client, under confidentiality terms.
INCIDENT NOTICE
Within 24 hours, in writing.
SOC 2 ALIGNMENT
Controls aligned to SOC 2 Trust Services Criteria. Formal audit on the roadmap.
END OF SCHEDULE — 09 / 09
[ 02 / THE PAPERWORK ]
Request our standard NDA + DPA.
Ours or yours — review with counsel. Access is scoped only after signatures, read-only where possible.
REPLIES WITHIN ONE US BUSINESS DAY
VESSEL AT BERTH — NIGHT
